unslop
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to transform and rewrite untrusted user-provided text, creating a surface for potential instructions to be embedded in the input.
- Ingestion points: The "Process" section in SKILL.md instructs the agent to scan and rewrite text provided by the user.
- Boundary markers: The skill does not define specific delimiters (like XML tags or triple quotes) or provide instructions to ignore commands potentially embedded within the input prose.
- Capability inventory: None. The skill does not request access to any tools (allowed-tools is empty/absent), and it includes no script files, network operations, or file system access commands.
- Sanitization: No sanitization or filtering of input content is specified before the agent processes the text.
- [NO_CODE]: The skill consists entirely of instructional markdown text. It does not include any scripts (e.g., Python, JavaScript, Shell) or binary executables, significantly reducing the attack surface.
Audit Metadata